clawdbot 2026.1.4-1

package/dist/cli/gateway-cli.js

@@ -0,0 +1,489 @@
+import fs from "node:fs";
+import { CONFIG_PATH_CLAWDBOT, loadConfig, resolveGatewayPort, } from "../config/config.js";
+import { callGateway, randomIdempotencyKey } from "../gateway/call.js";
+import { startGatewayServer } from "../gateway/server.js";
+import { setGatewayWsLogStyle, } from "../gateway/ws-logging.js";
+import { setVerbose } from "../globals.js";
+import { GatewayLockError } from "../infra/gateway-lock.js";
+import { createSubsystemLogger } from "../logging.js";
+import { defaultRuntime } from "../runtime.js";
+import { createDefaultDeps } from "./deps.js";
+import { forceFreePortAndWait } from "./ports.js";
+const gatewayLog = createSubsystemLogger("gateway");
+function parsePort(raw) {
+    if (raw === undefined || raw === null)
+        return null;
+    const value = typeof raw === "string"
+        ? raw
+        : typeof raw === "number" || typeof raw === "bigint"
+            ? raw.toString()
+            : null;
+    if (value === null)
+        return null;
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isFinite(parsed) || parsed <= 0)
+        return null;
+    return parsed;
+}
+async function runGatewayLoop(params) {
+    let server = null;
+    let shuttingDown = false;
+    let restartResolver = null;
+    const cleanupSignals = () => {
+        process.removeListener("SIGTERM", onSigterm);
+        process.removeListener("SIGINT", onSigint);
+        process.removeListener("SIGUSR1", onSigusr1);
+    };
+    const request = (action, signal) => {
+        if (shuttingDown) {
+            gatewayLog.info(`received ${signal} during shutdown; ignoring`);
+            return;
+        }
+        shuttingDown = true;
+        const isRestart = action === "restart";
+        gatewayLog.info(`received ${signal}; ${isRestart ? "restarting" : "shutting down"}`);
+        const forceExitTimer = setTimeout(() => {
+            gatewayLog.error("shutdown timed out; exiting without full cleanup");
+            cleanupSignals();
+            params.runtime.exit(0);
+        }, 5000);
+        void (async () => {
+            try {
+                await server?.close({
+                    reason: isRestart ? "gateway restarting" : "gateway stopping",
+                    restartExpectedMs: isRestart ? 1500 : null,
+                });
+            }
+            catch (err) {
+                gatewayLog.error(`shutdown error: ${String(err)}`);
+            }
+            finally {
+                clearTimeout(forceExitTimer);
+                server = null;
+                if (isRestart) {
+                    shuttingDown = false;
+                    restartResolver?.();
+                }
+                else {
+                    cleanupSignals();
+                    params.runtime.exit(0);
+                }
+            }
+        })();
+    };
+    const onSigterm = () => request("stop", "SIGTERM");
+    const onSigint = () => request("stop", "SIGINT");
+    const onSigusr1 = () => request("restart", "SIGUSR1");
+    process.on("SIGTERM", onSigterm);
+    process.on("SIGINT", onSigint);
+    process.on("SIGUSR1", onSigusr1);
+    try {
+        // Keep process alive; SIGUSR1 triggers an in-process restart (no supervisor required).
+        // SIGTERM/SIGINT still exit after a graceful shutdown.
+        // eslint-disable-next-line no-constant-condition
+        while (true) {
+            server = await params.start();
+            await new Promise((resolve) => {
+                restartResolver = resolve;
+            });
+        }
+    }
+    finally {
+        cleanupSignals();
+    }
+}
+const gatewayCallOpts = (cmd) => cmd
+    .option("--url <url>", "Gateway WebSocket URL (defaults to gateway.remote.url when configured)")
+    .option("--token <token>", "Gateway token (if required)")
+    .option("--password <password>", "Gateway password (password auth)")
+    .option("--timeout <ms>", "Timeout in ms", "10000")
+    .option("--expect-final", "Wait for final response (agent)", false);
+const callGatewayCli = async (method, opts, params) => callGateway({
+    url: opts.url,
+    token: opts.token,
+    password: opts.password,
+    method,
+    params,
+    expectFinal: Boolean(opts.expectFinal),
+    timeoutMs: Number(opts.timeout ?? 10_000),
+    clientName: "cli",
+    mode: "cli",
+});
+export function registerGatewayCli(program) {
+    program
+        .command("gateway-daemon")
+        .description("Run the WebSocket Gateway as a long-lived daemon")
+        .option("--port <port>", "Port for the gateway WebSocket", "18789")
+        .option("--bind <mode>", 'Bind mode ("loopback"|"tailnet"|"lan"|"auto"). Defaults to config gateway.bind (or loopback).')
+        .option("--token <token>", "Shared token required in connect.params.auth.token (default: CLAWDBOT_GATEWAY_TOKEN env if set)")
+        .option("--auth <mode>", 'Gateway auth mode ("token"|"password")')
+        .option("--password <password>", "Password for auth mode=password")
+        .option("--tailscale <mode>", 'Tailscale exposure mode ("off"|"serve"|"funnel")')
+        .option("--tailscale-reset-on-exit", "Reset Tailscale serve/funnel configuration on shutdown", false)
+        .option("--verbose", "Verbose logging to stdout/stderr", false)
+        .option("--ws-log <style>", 'WebSocket log style ("auto"|"full"|"compact")', "auto")
+        .option("--compact", 'Alias for "--ws-log compact"', false)
+        .action(async (opts) => {
+        setVerbose(Boolean(opts.verbose));
+        const wsLogRaw = (opts.compact ? "compact" : opts.wsLog);
+        const wsLogStyle = wsLogRaw === "compact"
+            ? "compact"
+            : wsLogRaw === "full"
+                ? "full"
+                : "auto";
+        if (wsLogRaw !== undefined &&
+            wsLogRaw !== "auto" &&
+            wsLogRaw !== "compact" &&
+            wsLogRaw !== "full") {
+            defaultRuntime.error('Invalid --ws-log (use "auto", "full", "compact")');
+            defaultRuntime.exit(1);
+        }
+        setGatewayWsLogStyle(wsLogStyle);
+        const cfg = loadConfig();
+        const portOverride = parsePort(opts.port);
+        if (opts.port !== undefined && portOverride === null) {
+            defaultRuntime.error("Invalid port");
+            defaultRuntime.exit(1);
+            return;
+        }
+        const port = portOverride ?? resolveGatewayPort(cfg);
+        if (!Number.isFinite(port) || port <= 0) {
+            defaultRuntime.error("Invalid port");
+            defaultRuntime.exit(1);
+            return;
+        }
+        if (opts.token) {
+            process.env.CLAWDBOT_GATEWAY_TOKEN = String(opts.token);
+        }
+        const authModeRaw = opts.auth ? String(opts.auth) : undefined;
+        const authMode = authModeRaw === "token" || authModeRaw === "password"
+            ? authModeRaw
+            : null;
+        if (authModeRaw && !authMode) {
+            defaultRuntime.error('Invalid --auth (use "token" or "password")');
+            defaultRuntime.exit(1);
+            return;
+        }
+        const tailscaleRaw = opts.tailscale ? String(opts.tailscale) : undefined;
+        const tailscaleMode = tailscaleRaw === "off" ||
+            tailscaleRaw === "serve" ||
+            tailscaleRaw === "funnel"
+            ? tailscaleRaw
+            : null;
+        if (tailscaleRaw && !tailscaleMode) {
+            defaultRuntime.error('Invalid --tailscale (use "off", "serve", or "funnel")');
+            defaultRuntime.exit(1);
+            return;
+        }
+        const bindRaw = String(opts.bind ?? cfg.gateway?.bind ?? "loopback");
+        const bind = bindRaw === "loopback" ||
+            bindRaw === "tailnet" ||
+            bindRaw === "lan" ||
+            bindRaw === "auto"
+            ? bindRaw
+            : null;
+        if (!bind) {
+            defaultRuntime.error('Invalid --bind (use "loopback", "tailnet", "lan", or "auto")');
+            defaultRuntime.exit(1);
+            return;
+        }
+        try {
+            await runGatewayLoop({
+                runtime: defaultRuntime,
+                start: async () => await startGatewayServer(port, {
+                    bind,
+                    auth: authMode || opts.password || authModeRaw
+                        ? {
+                            mode: authMode ?? undefined,
+                            password: opts.password
+                                ? String(opts.password)
+                                : undefined,
+                        }
+                        : undefined,
+                    tailscale: tailscaleMode || opts.tailscaleResetOnExit
+                        ? {
+                            mode: tailscaleMode ?? undefined,
+                            resetOnExit: Boolean(opts.tailscaleResetOnExit),
+                        }
+                        : undefined,
+                }),
+            });
+        }
+        catch (err) {
+            if (err instanceof GatewayLockError) {
+                defaultRuntime.error(`Gateway failed to start: ${err.message}`);
+                defaultRuntime.exit(1);
+                return;
+            }
+            defaultRuntime.error(`Gateway failed to start: ${String(err)}`);
+            defaultRuntime.exit(1);
+        }
+    });
+    const gateway = program
+        .command("gateway")
+        .description("Run the WebSocket Gateway")
+        .option("--port <port>", "Port for the gateway WebSocket", "18789")
+        .option("--bind <mode>", 'Bind mode ("loopback"|"tailnet"|"lan"|"auto"). Defaults to config gateway.bind (or loopback).')
+        .option("--token <token>", "Shared token required in connect.params.auth.token (default: CLAWDBOT_GATEWAY_TOKEN env if set)")
+        .option("--auth <mode>", 'Gateway auth mode ("token"|"password")')
+        .option("--password <password>", "Password for auth mode=password")
+        .option("--tailscale <mode>", 'Tailscale exposure mode ("off"|"serve"|"funnel")')
+        .option("--tailscale-reset-on-exit", "Reset Tailscale serve/funnel configuration on shutdown", false)
+        .option("--allow-unconfigured", "Allow gateway start without gateway.mode=local in config", false)
+        .option("--force", "Kill any existing listener on the target port before starting", false)
+        .option("--verbose", "Verbose logging to stdout/stderr", false)
+        .option("--ws-log <style>", 'WebSocket log style ("auto"|"full"|"compact")', "auto")
+        .option("--compact", 'Alias for "--ws-log compact"', false)
+        .action(async (opts) => {
+        setVerbose(Boolean(opts.verbose));
+        const wsLogRaw = (opts.compact ? "compact" : opts.wsLog);
+        const wsLogStyle = wsLogRaw === "compact"
+            ? "compact"
+            : wsLogRaw === "full"
+                ? "full"
+                : "auto";
+        if (wsLogRaw !== undefined &&
+            wsLogRaw !== "auto" &&
+            wsLogRaw !== "compact" &&
+            wsLogRaw !== "full") {
+            defaultRuntime.error('Invalid --ws-log (use "auto", "full", "compact")');
+            defaultRuntime.exit(1);
+        }
+        setGatewayWsLogStyle(wsLogStyle);
+        const cfg = loadConfig();
+        const portOverride = parsePort(opts.port);
+        if (opts.port !== undefined && portOverride === null) {
+            defaultRuntime.error("Invalid port");
+            defaultRuntime.exit(1);
+        }
+        const port = portOverride ?? resolveGatewayPort(cfg);
+        if (!Number.isFinite(port) || port <= 0) {
+            defaultRuntime.error("Invalid port");
+            defaultRuntime.exit(1);
+        }
+        if (opts.force) {
+            try {
+                const { killed, waitedMs, escalatedToSigkill } = await forceFreePortAndWait(port, {
+                    timeoutMs: 2000,
+                    intervalMs: 100,
+                    sigtermTimeoutMs: 700,
+                });
+                if (killed.length === 0) {
+                    gatewayLog.info(`force: no listeners on port ${port}`);
+                }
+                else {
+                    for (const proc of killed) {
+                        gatewayLog.info(`force: killed pid ${proc.pid}${proc.command ? ` (${proc.command})` : ""} on port ${port}`);
+                    }
+                    if (escalatedToSigkill) {
+                        gatewayLog.info(`force: escalated to SIGKILL while freeing port ${port}`);
+                    }
+                    if (waitedMs > 0) {
+                        gatewayLog.info(`force: waited ${waitedMs}ms for port ${port} to free`);
+                    }
+                }
+            }
+            catch (err) {
+                defaultRuntime.error(`Force: ${String(err)}`);
+                defaultRuntime.exit(1);
+                return;
+            }
+        }
+        if (opts.token) {
+            process.env.CLAWDBOT_GATEWAY_TOKEN = String(opts.token);
+        }
+        const authModeRaw = opts.auth ? String(opts.auth) : undefined;
+        const authMode = authModeRaw === "token" || authModeRaw === "password"
+            ? authModeRaw
+            : null;
+        if (authModeRaw && !authMode) {
+            defaultRuntime.error('Invalid --auth (use "token" or "password")');
+            defaultRuntime.exit(1);
+            return;
+        }
+        const tailscaleRaw = opts.tailscale ? String(opts.tailscale) : undefined;
+        const tailscaleMode = tailscaleRaw === "off" ||
+            tailscaleRaw === "serve" ||
+            tailscaleRaw === "funnel"
+            ? tailscaleRaw
+            : null;
+        if (tailscaleRaw && !tailscaleMode) {
+            defaultRuntime.error('Invalid --tailscale (use "off", "serve", or "funnel")');
+            defaultRuntime.exit(1);
+            return;
+        }
+        const configExists = fs.existsSync(CONFIG_PATH_CLAWDBOT);
+        const mode = cfg.gateway?.mode;
+        if (!opts.allowUnconfigured && mode !== "local") {
+            if (!configExists) {
+                defaultRuntime.error("Missing config. Run `clawdbot setup` or set gateway.mode=local (or pass --allow-unconfigured).");
+            }
+            else {
+                defaultRuntime.error("Gateway start blocked: set gateway.mode=local (or pass --allow-unconfigured).");
+            }
+            defaultRuntime.exit(1);
+            return;
+        }
+        const bindRaw = String(opts.bind ?? cfg.gateway?.bind ?? "loopback");
+        const bind = bindRaw === "loopback" ||
+            bindRaw === "tailnet" ||
+            bindRaw === "lan" ||
+            bindRaw === "auto"
+            ? bindRaw
+            : null;
+        if (!bind) {
+            defaultRuntime.error('Invalid --bind (use "loopback", "tailnet", "lan", or "auto")');
+            defaultRuntime.exit(1);
+            return;
+        }
+        try {
+            await runGatewayLoop({
+                runtime: defaultRuntime,
+                start: async () => await startGatewayServer(port, {
+                    bind,
+                    auth: authMode || opts.password || authModeRaw
+                        ? {
+                            mode: authMode ?? undefined,
+                            password: opts.password
+                                ? String(opts.password)
+                                : undefined,
+                        }
+                        : undefined,
+                    tailscale: tailscaleMode || opts.tailscaleResetOnExit
+                        ? {
+                            mode: tailscaleMode ?? undefined,
+                            resetOnExit: Boolean(opts.tailscaleResetOnExit),
+                        }
+                        : undefined,
+                }),
+            });
+        }
+        catch (err) {
+            if (err instanceof GatewayLockError) {
+                defaultRuntime.error(`Gateway failed to start: ${err.message}`);
+                defaultRuntime.exit(1);
+                return;
+            }
+            defaultRuntime.error(`Gateway failed to start: ${String(err)}`);
+            defaultRuntime.exit(1);
+        }
+    });
+    gatewayCallOpts(gateway
+        .command("call")
+        .description("Call a Gateway method and print JSON")
+        .argument("<method>", "Method name (health/status/system-presence/send/agent/cron.*)")
+        .option("--params <json>", "JSON object string for params", "{}")
+        .action(async (method, opts) => {
+        try {
+            const params = JSON.parse(String(opts.params ?? "{}"));
+            const result = await callGatewayCli(method, opts, params);
+            defaultRuntime.log(JSON.stringify(result, null, 2));
+        }
+        catch (err) {
+            defaultRuntime.error(`Gateway call failed: ${String(err)}`);
+            defaultRuntime.exit(1);
+        }
+    }));
+    gatewayCallOpts(gateway
+        .command("health")
+        .description("Fetch Gateway health")
+        .action(async (opts) => {
+        try {
+            const result = await callGatewayCli("health", opts);
+            defaultRuntime.log(JSON.stringify(result, null, 2));
+        }
+        catch (err) {
+            defaultRuntime.error(String(err));
+            defaultRuntime.exit(1);
+        }
+    }));
+    gatewayCallOpts(gateway
+        .command("status")
+        .description("Fetch Gateway status")
+        .action(async (opts) => {
+        try {
+            const result = await callGatewayCli("status", opts);
+            defaultRuntime.log(JSON.stringify(result, null, 2));
+        }
+        catch (err) {
+            defaultRuntime.error(String(err));
+            defaultRuntime.exit(1);
+        }
+    }));
+    gatewayCallOpts(gateway
+        .command("wake")
+        .description("Enqueue a system event and optionally trigger a heartbeat")
+        .requiredOption("--text <text>", "System event text")
+        .option("--mode <mode>", "Wake mode (now|next-heartbeat)", "next-heartbeat")
+        .action(async (opts) => {
+        try {
+            const result = await callGatewayCli("wake", opts, {
+                mode: opts.mode,
+                text: opts.text,
+            });
+            defaultRuntime.log(JSON.stringify(result, null, 2));
+        }
+        catch (err) {
+            defaultRuntime.error(String(err));
+            defaultRuntime.exit(1);
+        }
+    }));
+    gatewayCallOpts(gateway
+        .command("send")
+        .description("Send a message via the Gateway")
+        .requiredOption("--to <jidOrPhone>", "Destination (E.164 or jid)")
+        .requiredOption("--message <text>", "Message text")
+        .option("--media-url <url>", "Optional media URL")
+        .option("--gif-playback", "Treat video media as GIF playback", false)
+        .option("--idempotency-key <key>", "Idempotency key")
+        .action(async (opts) => {
+        try {
+            const idempotencyKey = opts.idempotencyKey ?? randomIdempotencyKey();
+            const result = await callGatewayCli("send", opts, {
+                to: opts.to,
+                message: opts.message,
+                mediaUrl: opts.mediaUrl,
+                gifPlayback: opts.gifPlayback,
+                idempotencyKey,
+            });
+            defaultRuntime.log(JSON.stringify(result, null, 2));
+        }
+        catch (err) {
+            defaultRuntime.error(String(err));
+            defaultRuntime.exit(1);
+        }
+    }));
+    gatewayCallOpts(gateway
+        .command("agent")
+        .description("Run an agent turn via the Gateway (waits for final)")
+        .requiredOption("--message <text>", "User message")
+        .option("--to <jidOrPhone>", "Destination")
+        .option("--session-id <id>", "Session id")
+        .option("--thinking <level>", "Thinking level")
+        .option("--deliver", "Deliver response", false)
+        .option("--timeout-seconds <n>", "Agent timeout seconds")
+        .option("--idempotency-key <key>", "Idempotency key")
+        .action(async (opts) => {
+        try {
+            const idempotencyKey = opts.idempotencyKey ?? randomIdempotencyKey();
+            const result = await callGatewayCli("agent", { ...opts, expectFinal: true }, {
+                message: opts.message,
+                to: opts.to,
+                sessionId: opts.sessionId,
+                thinking: opts.thinking,
+                deliver: Boolean(opts.deliver),
+                timeout: opts.timeoutSeconds
+                    ? Number.parseInt(String(opts.timeoutSeconds), 10)
+                    : undefined,
+                idempotencyKey,
+            });
+            defaultRuntime.log(JSON.stringify(result, null, 2));
+        }
+        catch (err) {
+            defaultRuntime.error(String(err));
+            defaultRuntime.exit(1);
+        }
+    }));
+    // Build default deps (keeps parity with other commands; future-proofing).
+    void createDefaultDeps();
+}

package/dist/cli/gateway-rpc.js

@@ -0,0 +1,20 @@
+import { callGateway } from "../gateway/call.js";
+export function addGatewayClientOptions(cmd) {
+    return cmd
+        .option("--url <url>", "Gateway WebSocket URL (defaults to gateway.remote.url when configured)")
+        .option("--token <token>", "Gateway token (if required)")
+        .option("--timeout <ms>", "Timeout in ms", "10000")
+        .option("--expect-final", "Wait for final response (agent)", false);
+}
+export async function callGatewayFromCli(method, opts, params, extra) {
+    return await callGateway({
+        url: opts.url,
+        token: opts.token,
+        method,
+        params,
+        expectFinal: extra?.expectFinal ?? Boolean(opts.expectFinal),
+        timeoutMs: Number(opts.timeout ?? 10_000),
+        clientName: "cli",
+        mode: "cli",
+    });
+}

package/dist/cli/hooks-cli.js

@@ -0,0 +1,135 @@
+import { danger } from "../globals.js";
+import { DEFAULT_GMAIL_LABEL, DEFAULT_GMAIL_MAX_BYTES, DEFAULT_GMAIL_RENEW_MINUTES, DEFAULT_GMAIL_SERVE_BIND, DEFAULT_GMAIL_SERVE_PATH, DEFAULT_GMAIL_SERVE_PORT, DEFAULT_GMAIL_SUBSCRIPTION, DEFAULT_GMAIL_TOPIC, } from "../hooks/gmail.js";
+import { runGmailService, runGmailSetup, } from "../hooks/gmail-ops.js";
+import { defaultRuntime } from "../runtime.js";
+export function registerHooksCli(program) {
+    const hooks = program
+        .command("hooks")
+        .description("Webhook helpers and hook-based integrations");
+    const gmail = hooks
+        .command("gmail")
+        .description("Gmail Pub/Sub hooks (via gogcli)");
+    gmail
+        .command("setup")
+        .description("Configure Gmail watch + Pub/Sub + Clawdbot hooks")
+        .requiredOption("--account <email>", "Gmail account to watch")
+        .option("--project <id>", "GCP project id (OAuth client owner)")
+        .option("--topic <name>", "Pub/Sub topic name", DEFAULT_GMAIL_TOPIC)
+        .option("--subscription <name>", "Pub/Sub subscription name", DEFAULT_GMAIL_SUBSCRIPTION)
+        .option("--label <label>", "Gmail label to watch", DEFAULT_GMAIL_LABEL)
+        .option("--hook-url <url>", "Clawdbot hook URL")
+        .option("--hook-token <token>", "Clawdbot hook token")
+        .option("--push-token <token>", "Push token for gog watch serve")
+        .option("--bind <host>", "gog watch serve bind host", DEFAULT_GMAIL_SERVE_BIND)
+        .option("--port <port>", "gog watch serve port", String(DEFAULT_GMAIL_SERVE_PORT))
+        .option("--path <path>", "gog watch serve path", DEFAULT_GMAIL_SERVE_PATH)
+        .option("--include-body", "Include email body snippets", true)
+        .option("--max-bytes <n>", "Max bytes for body snippets", String(DEFAULT_GMAIL_MAX_BYTES))
+        .option("--renew-minutes <n>", "Renew watch every N minutes", String(DEFAULT_GMAIL_RENEW_MINUTES))
+        .option("--tailscale <mode>", "Expose push endpoint via tailscale (funnel|serve|off)", "funnel")
+        .option("--tailscale-path <path>", "Path for tailscale serve/funnel")
+        .option("--push-endpoint <url>", "Explicit Pub/Sub push endpoint")
+        .option("--json", "Output JSON summary", false)
+        .action(async (opts) => {
+        try {
+            const parsed = parseGmailSetupOptions(opts);
+            await runGmailSetup(parsed);
+        }
+        catch (err) {
+            defaultRuntime.error(danger(String(err)));
+            defaultRuntime.exit(1);
+        }
+    });
+    gmail
+        .command("run")
+        .description("Run gog watch serve + auto-renew loop")
+        .option("--account <email>", "Gmail account to watch")
+        .option("--topic <topic>", "Pub/Sub topic path (projects/.../topics/..)")
+        .option("--subscription <name>", "Pub/Sub subscription name")
+        .option("--label <label>", "Gmail label to watch")
+        .option("--hook-url <url>", "Clawdbot hook URL")
+        .option("--hook-token <token>", "Clawdbot hook token")
+        .option("--push-token <token>", "Push token for gog watch serve")
+        .option("--bind <host>", "gog watch serve bind host")
+        .option("--port <port>", "gog watch serve port")
+        .option("--path <path>", "gog watch serve path")
+        .option("--include-body", "Include email body snippets")
+        .option("--max-bytes <n>", "Max bytes for body snippets")
+        .option("--renew-minutes <n>", "Renew watch every N minutes")
+        .option("--tailscale <mode>", "Expose push endpoint via tailscale (funnel|serve|off)")
+        .option("--tailscale-path <path>", "Path for tailscale serve/funnel")
+        .action(async (opts) => {
+        try {
+            const parsed = parseGmailRunOptions(opts);
+            await runGmailService(parsed);
+        }
+        catch (err) {
+            defaultRuntime.error(danger(String(err)));
+            defaultRuntime.exit(1);
+        }
+    });
+}
+function parseGmailSetupOptions(raw) {
+    const accountRaw = raw.account;
+    const account = typeof accountRaw === "string" ? accountRaw.trim() : "";
+    if (!account)
+        throw new Error("--account is required");
+    return {
+        account,
+        project: stringOption(raw.project),
+        topic: stringOption(raw.topic),
+        subscription: stringOption(raw.subscription),
+        label: stringOption(raw.label),
+        hookUrl: stringOption(raw.hookUrl),
+        hookToken: stringOption(raw.hookToken),
+        pushToken: stringOption(raw.pushToken),
+        bind: stringOption(raw.bind),
+        port: numberOption(raw.port),
+        path: stringOption(raw.path),
+        includeBody: booleanOption(raw.includeBody),
+        maxBytes: numberOption(raw.maxBytes),
+        renewEveryMinutes: numberOption(raw.renewMinutes),
+        tailscale: stringOption(raw.tailscale),
+        tailscalePath: stringOption(raw.tailscalePath),
+        pushEndpoint: stringOption(raw.pushEndpoint),
+        json: Boolean(raw.json),
+    };
+}
+function parseGmailRunOptions(raw) {
+    return {
+        account: stringOption(raw.account),
+        topic: stringOption(raw.topic),
+        subscription: stringOption(raw.subscription),
+        label: stringOption(raw.label),
+        hookUrl: stringOption(raw.hookUrl),
+        hookToken: stringOption(raw.hookToken),
+        pushToken: stringOption(raw.pushToken),
+        bind: stringOption(raw.bind),
+        port: numberOption(raw.port),
+        path: stringOption(raw.path),
+        includeBody: booleanOption(raw.includeBody),
+        maxBytes: numberOption(raw.maxBytes),
+        renewEveryMinutes: numberOption(raw.renewMinutes),
+        tailscale: stringOption(raw.tailscale),
+        tailscalePath: stringOption(raw.tailscalePath),
+    };
+}
+function stringOption(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed ? trimmed : undefined;
+}
+function numberOption(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    const n = typeof value === "number" ? value : Number(value);
+    if (!Number.isFinite(n) || n <= 0)
+        return undefined;
+    return Math.floor(n);
+}
+function booleanOption(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    return Boolean(value);
+}